March 2014 - tor-relays - lists.torproject.org

Are zealous connections to directory port common?
by Tora Tora Tora 14 Mar '14

14 Mar '14

I just recently allowed the directory ports of my relay to be listed and noticed that some IPs are a bit overzealous in connecting to the directory port. As in 108 connections within a minute zealous. Is this unusual?

5 10

Tor plugin for Nagios - Alpha release
by ramo＠goodvikings.com 12 Mar '14

12 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hiya List As I mentioned a few weeks ago, I am developing a tor plugin for nagios. Well, today, the first alpha release is out, available at https://github.com/goodvikings/tor_nagios/tree/v0.01 . Currently it supports 6 different checks: 1 - A page fetch through the socks proxy port 2 - Hibernation state 3 - Current bandwidth 4 - OR port reachability 5 - DIR port reachability 6 - Bytes remaining until hibernation If you're interested please give it a go, feedback is more than welcome. Additionally, if you want to see any additional checks implemented, give us a yell. Cheers Ramo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iQEcBAEBAgAGBQJTH7neAAoJEAXQWoW8lug/ws8H/RxVSKi3Ft8Lr/a3DKi+JMIC HNpOWrGbJEY3RWaJAx/H2L32KC5lE1mJbHm7BI3H1JTmdGkXmkFkyM4pou2/XQg6 DfJO+Zd7LGuJlIzqED3fyH7jB+SA4Syu+eOD710kYF4zQKBmsOy/qqW7R6Ymgq8Q 88JUUuYveAWIDgqir8WwBe8SqJsIWriVd5bObzzB5GZXiZarfMG6dw/kmJicZgyG QUOrddU/9ndrO7B3PCM8JmlB9xHMMuH97up9jS0/kIQFDUiejN/NM62AyDApd+Ef 5jqG8+E6wYWli3mlsc0d3ge4Wix0HPLhllHMxsxrTK3A3quveyVT7pZiO7t1Yas= =awZI -----END PGP SIGNATURE-----

1 0

Ask Me Anything on Reddit about Tor
by Jesse Victors 11 Mar '14

11 Mar '14

I recently held an Ask Me Anything on Reddit about Tor. For those that don't know, Reddit is famous for its AMAs, wherein someone unique or otherwise interesting will introduce themselves and then the community gets a chance to ask questions and learn. Traditionally it's been used as an excellent way of asking the questions that you never get an opportunity to ask. We've seen everyone from Chris Hadfield to Barack Obama give AMAs. Since I run some relays and a couple of exits I figured I'd give it a shot, and there was quite the turnout! I got responses from all over the world, and I strongly feel that it was a very educational moment for everyone. The main thread was voted on by about a thousand people, but many Redditors don't log on so I'd say that many thousands of people read it. The thread is still ongoing and I'll continue to answer questions as they arrive, but I figured that I'd share it with everyone since it's winding down. Pretty cool news moment for Tor, and should help clear up some misconceptions and correct public perceptions. https://pay.reddit.com/r/IAmA/comments/20243q/iaman_operator_of_eight_tor_r… Thanks guys. Jesse V.

2 1

Re: [tor-relays] Is Kaspersky right to be concerned?
by grarpamp 10 Mar '14

10 Mar '14

> [oh the bad..., re: ] > http://cryptome.org/2013/09/tor-analysis-hidden-services.pdf Do you seriously think that reporters, aid workers, freedom fighters, investigators, whistleblowers, and simple chatfriends, etc are going to publish their onions for all to see, with all their data and logs and so on as some kind of stage show for you? The answere to that is no. They have better good and private things to do that do not concern you until it hits the AP wire. So of course all you're goin to see on the public onions are a bunch of channers, criminals, crazy loons and a growing scattering of real projects and clearnet multihomes. Unlike clearnet, any statistic over the onions you can see is simply not going to be representative of the whole of onionspace, quite a bit of which you cannot see. You need to both understand and come to terms with that. Lest you too could not use anonymous systems when you needed them because some other thoughtless crybaby banned them and your ability to communicate freely and securely out from under you. ps: please drop relays and take this tired subject to tor-talk.

1 0

botnets run on Tor
by I 10 Mar '14

10 Mar '14

8 9

Gigabit is powerful
by Felix 07 Mar '14

07 Mar '14

High speeders Strong relays are a powerful contribution. As long as they are robust to resist misuse by attackers. Last night I received around 250.000 circuits per 5 minutes over one hour on a 100Mbit relay. In case the relay would forward this it could harm someone who is not prepared. And I would be a part of the sender chain. Felix ==========---------- - - - - - - - - - - ----------========== -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.22 (MingW32) mQENBFL/5VoBCAC8l2gGmuy2hZf866dDkwzOvMkyJlfnFZU6T5LWe4uPIx0a8R1U cmj/Vut2yUCaJgvFpdOVA3mmXC58zoDeiW7Um6q6otD6BR2hXdgyBTAgqkQ0BsYx epb4UXBz/u3TJmv655fBnXeDgCB8L5BIkcsmX6EoBNUs6a3TPMhX3UXOtEKLXJeZ 2QtoDxwXqHNSmW7jLq+qkpriVDqxDTFv+muZRE+Zn/6PZpEASvpSdVdT/1giEMUL QQFIP6cBPY2GYIaNCO1dYRj9ebM7ewWjCiOiOw6/eylxan8vfFntgaPU3J7W2wJp RiRtUIjT+TDycVyNk7gy4wV2Rj8+58+Krk1tABEBAAG0IEZlbGl4IDx6d2llYmVs QHF1YW50ZW50dW5uZWwuZGU+iQE5BBMBAgAjBQJS/+VaAhsPBwsJCAcDAgEGFQgC CQoLBBYCAwECHgECF4AACgkQC2jb92rYqyMGxQf/d9oJf0qpgXZaUmcqujQ3DVsc uvYOnK2MJCpDIvvZYdQTcnG2jz8/na1ZyfAGeKhYZ18ypONwSQYthC17L5GHQ2H3 Pg/H0GARtx4aJR5TtIKnhPR8yYdlikCuTBb5QSFJUUtEz91SqDW7EXNbMC4RRSEd BWWirADCJWitoR3JCC13r+CF6TCFDluClAht/t56f7prBzARVYWmlbgYD2yx4Uzs FOl0vvhW2o9dpVaLZ6mSHAyNzefCFcNumRUxqa+V6nY94dd8BV8xH0lOd1xaMtZW HuxIU9Sbh13OlJyBAvVffVBL+4sEOpc8XB6Yl/pmyjEjUSvC7lP3T+Ix9Mnk/A== =kfXw -----END PGP PUBLIC KEY BLOCK-----

2 1

ScrambleSuit maintenance question
by Delton Barnes 07 Mar '14

07 Mar '14

Inexperienced Debian administrator here with a question about how to maintain the new obfsproxy/Tor for ScrambleSuit. I installed as follows: 1. Updated /etc/apt/sources.list (new lines prefixed with *): deb http://server.name.redacted/debian wheezy main contrib non-free *deb http://server.name.redacted/debian unstable main contrib non-free deb http://server.name.redacted/debian-security wheezy/updates main contrib non-free deb http://deb.torproject.org/torproject.org wheezy main *deb http://deb.torproject.org/torproject.org tor-nightly-master-wheezy main 2. Created apt.conf to prevent all packages from being pulled from unstable by default: echo 'APT::Default-Release "stable";' > /etc/apt/apt.conf 3. Edited torrc with following: ServerTransportPlugin obfs3,scramblesuit exec /usr/bin/obfsproxy managed 4. Installed the new packages: apt-get update apt-get -t unstable install obfsproxy apt-get upgrade <-- Installed Tor nightly. 5. service restart tor My question: Is there a way to configure things so obfsproxy and Tor will later automatically be upgraded to a *stable* release that includes ScrambleSuit? And how to know when I need to upgrade obfsproxy and Tor? Thanks, Delton

2 2

problem with tor-arm
by manu 06 Mar '14

06 Mar '14

Hello! I use tor-arm to manage my relay, at startup the following messages appear: [ARM_NOTICE] Unable to prepopulate bandwidth information (insufficient uptime) [ARM_NOTICE] Unable to save configuration descriptions (permission denied: '/home/username/.arm') Problem is the same for every user who runs arm (root, debian-tor) Already tried 777 this folder, and make "debian-tor" the owner - without success. Purge & reinstall does not change anything. I am running Ubuntu Server 12.04 x64. Whats wrong? best regards manu

2 1

(untrusted) Raspberry Pi binary .deb packages for Tor 0.2.4.18-rc
by Gordon Morehouse 06 Mar '14

06 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I've built Tor 0.2.4.18-rc for the Raspberry Pi and released unofficial packages[1]. They are signed with my GPG key, but as always, if you don't trust binary packages from some dude on the internet, please see the instructions to compile them for yourself[1]. 1. https://github.com/gordon-morehouse/cipollini/tree/master/raspbian_packages… 2. https://www.torproject.org/docs/debian.html.en#source Best, - -Gordon M. -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJSj5ghAAoJED/jpRoe7/ujpugIAL8U1aGVZQ4FSqCgRac0g4oW pqEGYT/aHI7GYX1J0ruS5kSjB7VGBqqskvb3LmWkSjMbJwX7MqTLbfUBj/wX8db8 sHTH/cdFNin3qazjrMnS0fe6bJ/AlimPcQSQfeEPQ3w5Wqk2Lb/qxVEY0cGxwYDn p6P4KItegJkWcT7pKHCcIkLcjUHjalS4N9xUOg0oFh1cXzA4YRrMbrmHuNuNYtOG OV09+56jlOJm6ApsYHNiDO/3lYB8xPnaMs8EbOVWUjBsh0kraTusXvNs9IquZEXd Pk83VhavdsiAmksz5u6q7+gVIXsBkwxTBlpybj5aWNOwze2D4DNe/eBKVzLTu2w= =7g1s -----END PGP SIGNATURE-----

2 1

Tor hidden services – a safe haven for cybercriminals
by an.to_n-73＠riseup.net 05 Mar '14

05 Mar '14

Hey folks! Something to read from Kaspersky Labs: https://www.securelist.com/en/blog/8187/Tor_hidden_services_a_safe_haven_fo… Interesting is, that Eugene Kaspersky hisself states in an interview: "We cooperate not only with the FSB, but also with the Americans and Brazilians, and with a variety of European agencies on security issues or cybercriminals. We sit a group of experts who break the code better than anyone in the world - perhaps only after the FBI. They understand, disassembles, analyze codes and understand what it is the best in the world. People come to us, "Guys, what is it?" - And we respond. We are not able to engage in all sorts of detective work, it's not our job, but we give them the information on which they continue to catch criminals. Or, conversely, we can see some information that may seem interesting to them, and we give them. Sometimes, in Germany looking for stolen laptops, we gave IPs" You can use Google translate to read the whole Russian interview in your language: http://lenta.ru/articles/2013/10/01/kaspersky Facing the overwhelming bulk surveillance I encourage everyone to start more relays/bridges! ==> Are there public statistics about the fraction of illegal content in/from Tor? Is it significantly more than in the "normal"net? We need some counter-arguments. Our "adversaries" will continue putting us in the criminal/terrorist/child-abuse category. But distributed P2P anonymizers like Tor, I2P, GNUnet, Bitmessage etc. are the only technology that helps against mass surveillance. Best regards Anton -- an.to_n-73 at riseup dot net PGP: 0B4C DF2C CB22 5DF4 25EA F212 49D1 ABF2 A2A9 7D7D Bitmessage: BM-2cTY8fuXGGXmh3fVgfQMaRCqTpgqp479ux (no metadata)

1 0